Lucene search
PRIOn knowledge basePRION:CVE-2020-5244HistoryFeb 24, 2020 - 6:15 p.m.
Authentication flaw
2020-02-2418:15:00
PRIOn knowledge base
www.prio-n.com
7
0.002 Low
EPSS
Percentile
60.8%
In BuddyPress before 5.1.2, requests to a certain REST API endpoint can result in private user data getting exposed. Authentication is not needed. This has been patched in version 5.1.2.
| CPE | Name | Operator | Version |
|---|---|---|---|
| buddypress | ge | 5.0.0 | |
| buddypress | lt | 5.1.2 |
Related
github
github
Private data exposure via REST API in BuddyPress
2020-02-24 17:18:26
osv
osv
CVE-2020-5244
2020-02-24 18:15:22
Private data exposure via REST API in BuddyPress
2020-02-24 17:18:26
cve
cve
CVE-2020-5244
2020-02-24 18:15:22
openvas
openvas
WordPress BuddyPress Plugin < 5.1.2 Information Disclosure Vulnerability
2020-02-28 00:00:00
nvd
nvd
CVE-2020-5244
2020-02-24 18:15:22
veracode
veracode
Information Disclosure
2020-02-25 04:39:12
cvelist
cvelist
CVE-2020-5244 Private data exposure via REST API in BuddyPress
2020-02-24 17:25:15